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DETAILED ACTION 

1. Claims 1-12 are subject to examination. 

Claim Rejections - 35 USC §112 

2. The following is a quotation of the second paragraph of 35 U.S.C. 1 1 2: 

The specification shall conclude with one or more claims particularly pointing out and distinctly 
claiming the subject matter which the applicant regards as his invention. 

3. Claims 3 and 9 are rejected under 35 U.S.C. 112, second paragraph, as being 
indefinite for failing to particularly point out and distinctly claim the subject matter which 
applicant regards as the invention. 

Referring to claims 3 and 9, 

These claims use of slashes symbol between descriptive elements in the claims 
renders the scope and meaning of the claims unclear, as slashes could be construed to 
mean "and", "or" or both "and" and "or". 

Claim Rejections - 35 USC § 102 

4. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

(e) the invention was described in a patent granted on an application for patent by another filed in the 
United Stales before the invention thereof by the applicant for patent, or on an international apphcation by 
another who has fiilfilled the requirements of paragraphs (1), (2), and (4) of section 371(c) of this title 
before the invention thereof by the apphcant for patent. 

The changes made to 35 U.S.C. 102(e) by the American Inventors Protection Act 
of 1999 (AlPA) and the Intellectual Property and High Technology Technical 

Amendments Act of 2002 do not apply when the reference is a U.S. patent resulting 
directly or indirectly from an international application filed before November 29, 2000. 
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Therefore, the prior art date of the reference is determined under 35 U.S.C. 102(e) prior 
to the amendment by the AlPA (pre-AlPA 35 U.S.C. 102(e)). 

5. Claims 1-12 are rejected under 35 U.S.C. 102(e) as being anticipated by Lorrain 
et al. (hereinafter Lorrain) (US 6, 631, 137 B1) 
Referring to claim 1, 

Lorrain teaches a filter for an open system interconnection Iayer2 traffic 
separation in at least one Access Switching Router (42,44) in a network (40), having 
ports in the routers (42,44) configured to the same virtual local area network, said filter 
filtering data packet traffic to said ports (col. 2, line 14-33, col. 8, line 22-25, 
"Represented in FIG. 3 is R's ARP response format mentioning S as destination, R as 
source with its bridge MAC address and including the RIF information specifying the 
concerned LAN and exit port."), characterized in that it comprises:means for intercepting 
Iayer2 traffic from a network connected source device (HostA, HostB) for a Media 
Access Control address belonging to said virtual local area network, and determining if 
the traffic is permitted to be forwarded to other ports (col. 6, line 59-col. 7, line 8, 
"Another conventional tool used here and available in network operating protocols is the 
Address Resolution Protocol (ARP) which is a broadcast at layer 2 and which helps 
obtaining a LAN address corresponding to an IP address when this IP target is on the 
same LAN or bridged LAN as the IP source. This information is stored in ARP tables. 
The ARP protocol is performed used by broadcasting ARP requests. Every host listens 
to ARP requests and upon recognizing its own IP address, responds with its MAC 
address. The ARP requester saves this information in its ARP table. In other words. 
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ARP is the protocol used to dynamically bind a high level IP address to a low level 
physical address. Normally, ARP is only across a single physical network. But a router 
(R) receiving an ARP message may operate in Proxy ARP mode and answer an ARP 
request on behalf of the ARP target. In this application, as developed hereunder, R 
adds the target's subnet in its Proxy ARP support. ", Col. 7, line 16-23, "Referring again 
to FIG. 1 , assume the source (S) host needs to send an IP packet to the target host (T). 
To that end, S uses its IP routing table which designates the next hop to reach T. 
Assuming R has been designated as the default router for S, then through its IP routing 
table S, determines that the router R, reached through Token ring network Ml, is the 
next hop to reach T. If R's MAC is unknown, an ARP will be used to resolve it and store 
it in S's ARP cache. S encapsulates the IP packet in a conventional 802.5/Token ring 
header and sends it over N1 ."); 

means for intercepting Address Resolution Protocol broadcasts in such traffic, 
responding to said broadcast to said source device (HostA, HostB) regardless if a 
destination device Iayer2 domain is the same as source device Iayer2 domain, said 
source device (HostA, HostB) thus determining that the broadcast has acknowledged 
the Iayer2 address of a sought destination device (HostC, HostD), whereby the source 
device (HostA, HostB) transmits data packets to the destination device (HostC, HostD), 
said routers receiving said transmitted data packets (col. 7, line 65-col. 8, line 21, "R 
should configure in Proxy ARP for the considered subnet including T, i.e. be ready to 
answer any ARP for any IP address on N2. 
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Thus, when S needs to send a second packet to T, S's routing table will now 
indicate there is a direct route to T, so S will pass the packet to its interface on N1 with 
T's IP address being next hop. The networl< handler in S will perform a look up for that 
entry in its ARP table. If the address is not found, which is the case the first time a 
packet is to be forwarded from S to T, S broadcasts an ARP request for T's IP address 
(on an All Route Broadcast), that R will respond with a bridge MAC address. In other 
words, R provides for the whole subnet including T a single MAC address, i.e. RMAC 
address. T's MAC address is thus not reported upward as was the case with the above 
mentioned copending European Application. The whole subnet is reported instead. 
This means that for a different target T1 attached to same subnet as T (see FIG. 1) R 
shall respond as well since R is now configured as Proxy for all packets whose IP 
address matches with the subnet. No transparent bridging table is thus needed, but R 
has to add information in the RIF field to indicate on which LAN and which port the 
packet should be oriented. The overall result simulates a bridging. "); 

means for determining the egress port to said destination 
device (col. 8, line 38-44, "Accordingly, the new packet for T is sent by S to T's IP 
address, with RMAC address as destination, over N1. R bridging function recognizing 
RMAC address and RIF data and using its ARP table for router exit port shall find the 
correct T's MAC address, substitute T's MAC address to the destination MAC address 
header field content in the considered packet and forward the packet into N2. "); 

means for determining the Iayer2 address of said destination device (HostC, 
HostD) (col. 8, line 38-44, "Accordingly, the new packet for T is sent by S to T's IP 
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address, with RMAC address as destination, over N1. R bridging function recognizing 
RMAC address and RIF data and using its ARP table for router exit port shall find the 
correct T's MAC address, substitute T's MAC address to the destination MAC address 
header field content in the considered packet and forward the packet into N2. "); 

means for adjusting the Iayer2 header from said received data packet, said 
means for setting the source Iayer2 address, setting said router's source address for the 
data packets, said means for determining the Iayer2 address of the destination device 
(HostC, HostD), setting the destination Iayer2 address to that of the destination device 
(HostC, HostD), transmitting the data packet to the destination device (HostC, HostD) 
(col. 9, line 5-60, "Also, the present approach may be extended to Ethernet LAN 
networks but since the RIF field would not be available in the frame format to be used, 
the number of bridge MAC addresses required would be equivalent to the number of 
exit ports on R. 

Extension to a global network including both Token ring LAN sections and 
Ethernet LAN sections would require only the insertion of conventional so-called 
translational bridging facilities in between. 

If S sends a directed broadcast to T's subnet, It will be broadcasted over N1 
since S thinks that T Is on N1. But R bridging function will recognize MAC level 
broadcast and pass up the packets to upper layer for routing instead of bridging. The 
router should drop the packet as it is a MAC level broadcast, but it recognizes the target 
subnet is actually bridged, so it routes the packet using normal IP routing. 
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The basic process of tliis invention as described above lias been summarized in 
the flowchart of FIG. 5 which enables a man skilled in the art to implement the invention 
without any additional inventive effort being required. First step: first packet to be sent 
from S to T S reads IP routing table. Since no path was already set-up to route the 
packet, S selects the default router R. S encapsulates 1st packet with a 802.5/Token 
ring header: layer 2: *destlnatlon MAC address=RMAC *source MAC address=SMAC 
*RIF field=RIF to R layer 3: *TIP address (see FIG. 2) Second step: R receives first 
packet R reads IP table for best match with TIP address.fwdarw."subnet" including T is 
identified. R sends ICMP redirect over N1 as limited broadcast: all hosts(including S) 
add "subnet" as direct route toward T on their interface to N1 . R adds T subnet in Proxy 
ARP support Third step: second packet to be sent S passes packet to its N1 interface S 
broadcasts, on N1 , ARP request for T's IP address R responds with RMAC address and 
RIP data leading to N2, =R configures in Proxy ARP for the "subnet" (see FIG. 3) Fourth 
step: second packet is sent over N1 to TIP address with RMAC address as destination 
and with the RIF data, R bridging function receiving 2nd packet with RMAC address, 
identifies RIF data, reads ARP table for exit port (or runs ARP protocol to identify TMAC 
address and store it) substitutes T's MAC address into the second packet header 
destination MAC address field R forwards 2nd packet over N2. 

whereby a virtual LAN has been set with R being bridged for the considered 
target subnet."); and 

thus simulating that if the source device (HostA, HostB) and destination device 
(HostC, HostD) is in the same Iayer2 domain, the router Iayer2 address is the actual 
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destination address both for the source and destination device, or simulating that if the 
source device and destination device are not in the same Iayer2 domain but in the same 
layers subnet, the router Iayer2 address is the actual destination Iayer2 address for the 
source to the destination (Note: Examiner considers this limitation just as the effect of 
having the limitations above.). 
Referring to claim 2, 

Lorrain teaches a filter according to claim 1, characterized in that a port that 
resides in a sub router (42,44) is provided with said routers (42,44) Iayer2 address when 
addressing the destination device (HostC) (col. 9, line 14-21). 
Referring to claim 3, 

Lorrain teaches a filter according to claim 1 , characterized in e-the router (42,44) 
is investigating the source and/or destination address to determine the best exit port for 
the packet, to determine if the packet is in profile for rate-limiting, or to do other filtering 
based on information in the open system interconnection layerS and higher protocol 
layers (col. 9, line 14-21). 
Referring to claim 4, 

Lorrain teaches a filter according to claim 1 , characterized in that the e~router 
(42,44) is a combination of a Iayer2 switch and a layerS router, combining the 
capabilities of Iayer2 switching with advanced packet control and forwarding decisions 
in a layers router (col. 9, line 14-21). 
Referring to claim 5, 
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Lorrain teaches a filter according to claim I, characterized in that the filter 
provides for it is providing the use of one IP subnet, spreading it over several premises 
and a multiple of Access Switching Router and the same subnet in multiple Iayer2 
domains, whereby it is covering more customers (Figs. 6 and 8). 
Referring to claim 6, 

Lorrain teaches a filter according to claim 5, characterized in that it is providing a 
customer having multiple computers to receive more addresses ((Note: Examiner 
considers this limitation just as the effect of having the limitations above.). 
Referring to claim 7, 

Claim 7 is a claim to a method for a filter of claim 1. Therefore claim 7 is 
rejected for the reasons set forth for claim 1 . 
Referring to claim 8, 

Claim 8 is a claim to a method for a filter of claim 2. Therefore claim 8 is 
rejected for the reasons set forth for claim 2. 
Referring to claim 9, 

Claim 9 is a claim to a method for a filter of claim 3. Therefore claim 9 is 
rejected for the reasons set forth for claim 3. 
Referring to claim 10, 

Claim 10 is a claim to a method for a filter of claim 4. Therefore claim 10 is 
rejected for the reasons set forth for claim 4. 
Referring to claim 1 1 , 
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Claim 1 1 is a claim to a method for a filter of claim 5. Therefore claim 1 1 is 
rejected for the reasons set forth for claim 5. 
Referring to claim 12, 

Claim 12 is a claim to a method for a filter of claim 6. Therefore claim 12 is 
rejected for the reasons set forth for claim 6. 

Conclusion 

Examiner's note: Examiner has cited particular columns and line numbers in the 
references as applied to the claims above for the convenience of the applicant. 
Although the specified citations are representative of the teachings of the art and are 
applied to the specific limitations within the individual claim, other passages and figures 
may apply as well. It is respectfully requested from the applicant in preparing responses, 
to fully consider the references in entirety as potentially teaching all or part of the 
claimed invention, as well as the context of the passage as taught by the prior art or 
disclosed by the Examiner. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Ashok B. Patel whose telephone number is (571) 272- 
3972. The examiner can normally be reached on 6:30 am-4:30 pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Nathan A. Flynn can be reached on (571) 272-1915. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
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published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 

/Ashok B. Patel/ 

Examiner, Art Unit 2154 



